Forensic Data Recovery Software

Forensic data recovery software is different from common data recovery tools as its main purpose is the recovery of information rather than files. This can obviously be the same when trying to recover images but it can be something completely different when recovering text. The forensic data expert will try to get access to the information regardless of where they are located on a system.

Drive Look is a free forensic disk investigation tool from the developers of Drive Image XML. The forensic data recovery software is free to use and runs on many Microsoft operating systems like Windows 2000 or Windows XP but not Windows Vista. Registration data has been posted on the download page that needs to be entered into the software.

The forensic software will scan a selected hard drive, partition, logical drives, network drives or images and index all words that meet specific criteria. You can select the minimum and maximum word length and characters during setup. There is also the possibility to specify words that should be included in the scan.

Drive Look will list all words that it has found during scan in a searchable interface in the end. It is possible to scroll through the words on the left side or enter a search term to find out if a word or phrase has been discovered in the specified location. The forensic data software will display the locations on the storage device in either Ascii or Hex mode and list the sector and offset information of each hit. It is possible to read the text that is surrounding the discovered phrase to get a better understanding.

An alternative to Drive Look is The hard drive data retrieval tool Disk Investigator which makes use of a realtime search.

Advertisement